Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App vulnerabilities

Product

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

by saadiqbal · last CVE Mar 18, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 2High 2Medium 9Low 0

Severity

All severities13 Critical2 High2 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-3090	7.2	0%	Mar 18	Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type' Affected: through 3.8.0
CVE-2024-5207	7.2	0%	May 30	POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection Affected: through 2.9.3